Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 2 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,609All CVEsplus 18,890 rejected
- 375Last 24 hours2,979 in the last 7 days
- 17,113Last 30 days1,583 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 1 | 3 | 3 | 0 | 7 | 70 |
| 2025 | 1 | 2 | 9 | 1 | 0 | 13 | 63 |
| 2024 | 1 | 2 | 9 | 1 | 0 | 13 | 50 |
| 2023 | 0 | 4 | 7 | 2 | 0 | 13 | 37 |
| 2022 | 0 | 2 | 0 | 0 | 0 | 2 | 24 |
| 2021 | 3 | 6 | 4 | 0 | 0 | 13 | 22 |
| 2020 | 2 | 6 | 1 | 0 | 0 | 9 | 9 |
| Title | ||
|---|---|---|
| CVE-2026-27844 | Uncaught Exception (CWE-248) in the Controller 6000 and Controller 7000 diagnostic web interface allows an authenticated and authorized operator to trigger a…Gallagher · Controller 7000 and 6000 | Low2.7 |
| CVE-2026-27790 | Uncaught Exception (CWE-248) in the T20 Readers allows an authenticated and authorized operator to trigger a restart by sending specific requests, resulting in…Gallagher · T-20 Readers | Low2.7 |
| CVE-2026-26053 | An Incorrect Privilege Assignment (CWE-266) vulnerability in the Command Centre Server allows an authenticated operator with limited privileges to perform some…Gallagher · Command Centre Server | Medium5.3 |
| CVE-2026-25193 | Insertion of Sensitive Information into Log File (CWE-532) in some Command Centre Service installers could lead to Service Account credentials exposure.…Gallagher · Command Centre Server | High8.1 |
| CVE-2026-20801 | Cleartext Transmission of Sensitive Information (CWE-319) in a component used in the Gallagher Hanwha VMS and Gallagher NxWitness VMS integrations allows…Gallagher · NxWitness VMS and Hanwha VMS Integrations | Medium5.6 |
| CVE-2026-20757 | Improper Locking vulnerability (CWE-667) in Gallagher Morpho integration allows a privileged operator to cause a limited denial-of-service in the Command…Gallagher · Command Centre Server | Low2.5 |
| CVE-2025-47147 | Cleartext Storage of Sensitive Information (CWE-312) in the Command Centre Mobile Client on Android and iOS could allow an attacker with access to a logged-in…Gallagher · Command Centre Mobile Client | Medium5.7 |
| CVE-2025-64734 | Missing Release of Resource after Effective Lifetime (CWE-772) in the T21 Reader allows an attacker with physical access to the Reader to perform a…Gallagher · T21 Reader | Low2.4 |
| CVE-2025-52578 | Incorrect Usage of Seeds in Pseudo-Random Number Generator (CWE- 335) vulnerability in the High Sec ELM may allow a sophisticated attacker with physical…Gallagher · High Sec End of Line Module | Medium5.7 |
| CVE-2025-52457 | Observable Timing Discrepancy (CWE-208) in HBUS devices may allow an attacker with physical access to the device to extract device-specific keys, potentially…Gallagher · HBUS Devices | Medium5.7 |
| CVE-2025-48430 | Uncaught Exception (CWE-248) in the Command Centre Server allows an Authorized and Privileged Operator to crash the Command Centre Server at will. This issue…Gallagher · Command Centre Server | Medium5.5 |
| CVE-2025-48428 | Cleartext Storage of Sensitive Information (CWE-312) in the Gallagher Morpho integration could allow an authenticated user with access to the Command Centre…Gallagher · Command Centre Server | Medium6.7 |
| CVE-2025-47699 | Exposure of Sensitive System Information to an Unauthorized Control Sphere (CWE-497) in the Gallagher Morpho integration could allow an authenticated operator…Gallagher · Command Centre Server | Critical9.9 |
| CVE-2025-41402 | Client-Side Enforcement of Server-Side Security (CWE-602) in the Command Centre Server allows a privileged operator to enter invalid competency data, bypassing…Gallagher · Command Centre Server | Medium5.5 |
| CVE-2025-35981 | Exposure of Private Personal Information to an Unauthorized Actor (CWE-359) in the Command Centre Server allows a privileged Operator to view limited personal…Gallagher · Command Centre Server | Medium5.5 |
| CVE-2025-46406 | A Privilege Context Switching Error (CWE-270) in the Command Center Server could allow a privileged Operator with high level access in one Division to perform…Gallagher · Command Centre Server | Medium5.6 |
| CVE-2025-44003 | Missing Release of Resource after Effective Lifetime (CWE-772) in the Gallagher T-Series Reader allows an attacker with physical access to the reader to…Gallagher · T-Series Readers | Medium4.3 |
| CVE-2025-35983 | Improper Certificate Validation (CWE-295) in the Controller 7000 OneLink implementation could allow an unprivileged attacker to perform a limited denial of…Gallagher · Controller 7000 | Medium6.5 |
| CVE-2024-41724 | Improper Certificate Validation (CWE-295) in the Gallagher Command Centre SALTO integration allowed an attacker to spoof the SALTO server. This issue affects…Gallagher · Command Centre Server | High8.7 |
| CVE-2024-43107 | Improper Certificate Validation (CWE-295) in the Gallagher Milestone Integration Plugin (MIP) permits unauthenticated messages (e.g. alarm events) to be sent…Gallagher · Milestone Integration Plugin | High7.2 |
| CVE-2024-42407 | Insertion of Sensitive Information into Log File (CWE-532) in the Gallagher Command Centre Alarm Transmitter feature could allow an authenticated Operator to…Gallagher · Command Centre Server | High8.5 |
| CVE-2024-41146 | Use of Multiple Resources with Duplicate Identifier (CWE-694) in the Controller 6000 and Controller 7000 Platforms could allow an attacker with physical access…Gallagher · Controller 6000 and Controller 7000 | Medium4.6 |
| CVE-2024-43690 | Inclusion of Functionality from Untrusted Control Sphere(CWE-829) in the Command Centre Server and Workstations may allow an attacker to perform Remote Code…Gallagher · Command Centre Server | High8.0 |
| CVE-2024-39808 | Incorrect Calculation of Buffer Size (CWE-131) in the Controller 6000 and Controller 7000 OSDP message handling, allows an attacker with physical access to…Gallagher · Controller 6000 and Controller 7000 | Medium4.6 |
| CVE-2024-24972 | Buffer Copy without Checking Size of Input (CWE-120) in the Controller 6000 and Controller 7000 diagnostic web interface allows an authorised and authenticated…Gallagher · Controller 6000 and Controller 7000 | Medium6.5 |
| CVE-2024-23906 | Improper Neutralization of Input During Web Page Generation (CWE-79) in the Controller 6000 and Controller 7000 diagnostic webpage allows an attacker to modify…Gallagher · Controller 6000 and Controller 7000 | Medium6.1 |
| CVE-2024-23317 | External Control of File Name or Path (CWE-73) in the Controller 6000 and Controller 7000 allows an attacker with local access to the Controller to perform…Gallagher · Controller 6000 and Controller 7000 | Medium6.3 |
| CVE-2024-23194 | Improper output Neutralization for Logs (CWE-117) in the Command Centre API Diagnostics Endpoint could allow an attacker limited ability to modify Command…Gallagher · Command Centre | Low3.3 |
| CVE-2024-22387 | External Control of Critical State Data (CWE-642) in the Controller 6000 and Controller 7000 diagnostic web interface allows an authenticated user to modify…Gallagher · Controller 6000 and Controller 7000 | Medium6.8 |
| CVE-2024-23485 | Improperly Preserved Integrity of Hardware Configuration State During a Power Save/Restore Operation (CWE-1304) in the Controller 6000 and 7000 can lead to…Gallagher · Controller 6000 and Controller 7000 | Medium4.6 |
| CVE-2024-22383 | Missing release of resource after effective lifetime (CWE-772) in the Controller 7000 resulted in HBUS connected T-Series readers to not automatically recover…Gallagher · Controller 7000 | Medium6.2 |
| CVE-2024-21838 | Improper neutralization of special elements in output (CWE-74) used by the email generation feature of the Command Centre Server could lead to HTML code…Gallagher · Command Centre Server | Medium6.8 |
| CVE-2024-21815 | Insufficiently protected credentials (CWE-522) for third party DVR integrations to the Command Centre Server are accessible to authenticated but unprivileged…Gallagher · Command Centre Server | Critical9.1 |
| CVE-2023-46686 | A reliance on untrusted inputs in a security decision could be exploited by a privileged user to configure the Gallagher Command Centre Diagnostics Service to…Gallagher · Command Centre Diagnostics Service | Medium5.5 |
| CVE-2023-41967 | Sensitive information uncleared after debug/power state transition in the Controller 6000 could be abused by an attacker with knowledge of the Controller's…Gallagher · Controller 6000 | Low2.4 |
| CVE-2023-24590 | A format string issue in the Controller 6000's optional diagnostic web interface can be used to write/read from memory, and in some instances crash the…Gallagher · Controller 6000 | High7.5 |
| CVE-2023-23584 | An observable response discrepancy in the Gallagher Command Centre RESTAPI allows an insufficiently-privileged user to infer the presence of items that would…Gallagher · Command Centre Server | Medium4.3 |
| CVE-2023-23576 | Incorrect behavior order in the Command Centre Server could allow privileged users to gain physical access to the site for longer than intended after a network…Gallagher · Command Centre Server | Medium4.3 |
| CVE-2023-23570 | Client-Side enforcement of Server-Side security for the Command Centre server could be bypassed and lead to invalid configuration with undefined behavior. This…Gallagher · Command Centre | Medium5.4 |
| CVE-2023-22439 | Improper input validation of a large HTTP request in the Controller 6000 and Controller 7000 optional diagnostic web interface (Port 80) can be used to perform…Gallagher · Controller 6000/ Controller 7000 | Low3.1 |
| CVE-2023-6355 | Incorrect selection of fuse values in the Controller 7000 platform allows an attacker to bypass some protection mechanisms to enable local debug. This issue…Gallagher · Controller 7000 | Medium6.8 |
| CVE-2023-23568 | Improper privilege validation in Command Centre Server allows authenticated unprivileged operators to modify and view Personal Data Fields. This issue affects…Gallagher · Command Centre | Medium4.3 |
| CVE-2023-22363 | Access Zone stack overflowGallagher · Command Centre | Medium6.5 |
| CVE-2023-25074 | Competency access levels not enforced in the serverGallagher · Command Centre | High7.1 |
| CVE-2023-22428 | Improper privilege validation in Command Centre Server allows authenticated operators to modify Division lineage. This issue affects Command Centre: vEL8.80…Gallagher · Command Centre | High7.6 |
| CVE-2023-24584 | Controller 6000 buffer overflow via upload feature in web interfaceGallagher · Controller 6000 | High7.5 |
| CVE-2022-26348 | Command Centre Server is vulnerable to SQL Injection via Windows Registry settings for date fields on the server. The Windows Registry setting allows an…Gallagher · Command Centre | High8.2 |
| CVE-2022-26078 | Gallagher Controller 6000 is vulnerable to a Denial of Service attack via conflicting ARP packets with a duplicate IP address. This issue affects: Gallagher…Gallagher · Gallagher Controller 6000 | High7.5 |
| CVE-2021-23193 | Improper privilege validation vulnerability in COM Interface of Gallagher Command Centre Server allows authenticated unprivileged operators to retrieve…Gallagher · Command Centre | High8.1 |
| CVE-2021-23197 | Unquoted service path vulnerability in the Gallagher Controller Service allows an unprivileged user to execute arbitrary code as the account that runs the…Gallagher · Command Centre | Medium5.2 |